yeeYoYCyu
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_03646a9e0947942a936dd0101980236b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_03646a9e0947942a936dd0101980236b.dll
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_03646a9e0947942a936dd0101980236b
-
Size
188KB
-
MD5
03646a9e0947942a936dd0101980236b
-
SHA1
0746c936538010bb1fa999a94cb623cae3093be9
-
SHA256
547948e2e591dcb1c737eb5cf2fa3da7be94252849f0899770786b60583e8dc7
-
SHA512
001630fd7f6329aaea34fc1b3709278de2ade70ae2b6bc953907caaa5f9b176809c0abc73a52b6604275d7a0021088cfdcafb3b7196d10504eaee2645961c14b
-
SSDEEP
3072:hfgCPpNLcbtpko7+iLEx20z/Bp4iEIpmMoKGW6qfk7/ye:h4mpNLMC2RLwHe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_03646a9e0947942a936dd0101980236b
Files
-
VirusShare_03646a9e0947942a936dd0101980236b.dll windows:4 windows x86 arch:x86
760944284c9e1f5f23696a9fd22e0ada
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetEvent
GetDateFormatA
GetLocalTime
RtlUnwind
GetCurrentProcess
ExitProcess
TlsGetValue
SetLastError
TlsFree
TlsSetValue
GetCurrentThreadId
RaiseException
LocalAlloc
LocalFree
GetVersion
CloseHandle
GetProcessHeap
HeapFree
HeapAlloc
FormatMessageA
FindResourceA
DeleteCriticalSection
lstrlenA
lstrcpynA
FreeLibrary
LoadResource
InterlockedIncrement
InterlockedDecrement
GetVersionExA
DebugBreak
SetUnhandledExceptionFilter
WideCharToMultiByte
SizeofResource
HeapDestroy
LeaveCriticalSection
IsDBCSLeadByte
lstrcatA
MultiByteToWideChar
lstrlenW
GetLastError
IsBadWritePtr
lstrcpyA
lstrcmpiA
GetModuleHandleA
GetModuleFileNameA
user32
CharUpperA
ShowWindow
wsprintfW
DrawTextA
DrawTextExA
CharNextA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
CoTaskMemRealloc
shlwapi
StrCmpW
StrCmpIW
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adata Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ